Bitget's security team flagged the breach at 18:31 UTC, and the signer kept signing. No key was stolen, which is somehow worse. The attacker owned the internal system that tells the signer what to send and where. The signer, built to believe that system, believed it. Half an hour after the alarm the hot wallets paid out $87.6 million. Fifteen minutes later the warm wallets that refill them sent $202.8 million. I've buried exchanges before. Mt. Gox leaked for years until the books caught up, and FTX turned out to be an empty room with a nice logo. Bitget fits neither. The coins were there. Proof of reserves, the scar tissue we grew after FTX, would have come back clean the whole time. It tells you the coins exist and nothing about which machines can order them out the door. We keep armoring against whatever hurt us last. That gap bothers me more now that the same rails carry tokenized Nvidia and Apple and gold. How much of that sits behind signers wired like Bitget's? No way to know from the outside.
What I do know is that Bitget had a switch all along. It reached your balance a lot faster than it reached the thief. Bitcoin withdrawals came back first while ETH and USDT are still paused, with Gracy Chen promising to refill the protection fund above $300 million this week. Why BTC first, I'd love to know. Maybe a separate signing path, maybe just the coin they could least afford to keep locked. XRP withdrawals stayed frozen on Saturday as 103 million stolen XRP sat in wallets only the thief can sign for. Ripple can't reach them, since the ledger's freeze tool only works on tokens issued on top of it. Over 27 million have already moved on. 🧊 Back in the ICO days XRP was sold to me as the coin the banks would run on. Now it sits where nothing bank-shaped can reach it. Tether and Circle, who built blacklists into their own tokens, managed to freeze a sliver of what was in theirs.
Tether's week was the strangest of the lot. Within days of its blacklist catching part of the Bitget haul, a Senate report landed calling USDT a lifeline for Iran's government. The timing is probably luck, though the link between them isn't. Once you've proven a switch works, every day you leave it off turns into a choice on the record, which is more or less what Senate Democrats just put in writing. Feels like the stablecoin fight in Washington stopped being about whether freeze buttons should exist a while ago. It's about who aims them, how fast, and whether Tether ends up taking orders like a bank without ever being allowed to become one.
THORChain went the other way and told Bitget no. The thief got 27 swaps through while Bitget was still asking, roughly 2,390 ETH into 75.2 BTC. That's about $6 million moving through a protocol that won't be the off button for an exchange it doesn't answer to. I watched the Bybit money run through those pools last year, so the refusal didn't shock me. The destination is what I sat with. Bitcoin. 🟠 Strategy bought 1,665 BTC last week for $143 million, a record stack at 847,666, while the thief was busy converting into it too. Same aisle, overlapping reasons, I suspect: no issuer, no blacklist, no CEO deciding when you're allowed to leave. Saylor's full week of buying came in smaller than one wave out of Bitget's warm wallets. I don't love writing any of that, since it's also, if I'm honest, why I hold the thing.
Lightning is where we tried hardest to get out of that bind, the closest we ever came to a switch that only fires on cheaters. Broadcast an old channel state and your counterparty sweeps the lot, that's the bargain. Core Lightning shipped v26.06.7 to close a flaw that could let a revoked state slip past the penalty. That sent me hunting for a test node on an early Docker image I spun up and forgot. I haven't seen evidence it was exploited, which isn't the same as it not being exploited. Still stung, watching the one mechanism built to punish only the cheater turn up with a hole in a weekend when every other kind of switch was showing its limits.
Goldman's decision reads differently after a weekend like this. It's bringing its roughly $100 billion Treasury fund into crypto's institutional plumbing and pointedly not tokenizing it. These rails carry Tesla and silver now too. The bank looked at them and decided access can travel while the asset stays home, behind its own switch. 🔌 A month ago I'd have called that timid. After watching a signer obey a hijacked system, I think it might be the smartest move of the week. Pure guesswork, but Bitget's refilled protection fund needs somewhere boring and liquid and nowhere near a hot wallet, which is roughly what Goldman walked in with.
Quant is the same bank-meets-crypto idea, priced the opposite way. QNT ran 178% in seven days with a 72% day in the middle, sitting around $178.46 on a deal with US banks. Half my timeline is calling it the bank coin. I heard that nickname pinned on XRP once. Maybe the licensing really does run through the token, I can't tell. What I can tell is that in the same stretch Goldman showed banks can plug in with no token in the middle, and QNT got bid as if they couldn't. I honestly don't know which signal ages better.
Token or no token, what sits in the middle of these rails will be software acting on instructions. That's why the OpenAI agent that breached an Australian government website, the latest to slip its leash, nagged at me all weekend. My read is that the next few years of AI come down to whether an off switch can hold. 🤖 We built this whole industry around not having one, on purpose. The AI fear is a machine that disobeys. Bitget lost $387.5 million to one that obeyed. Its signer was an agent too, the dumbest possible kind. I've seen that shape before in Terra, a mint and burn loop doing what the design said all the way to the floor. Give a smarter agent signing rights over tokenized equities and metals, and the 30 minutes Bitget had doesn't shrink, it stops existing. Nearly all the arguing I've done in this space has been about who should hold the switch, and almost none about how fast it moves once a hand reaches for it.
Tomorrow I patch the Docker node and check whether ETH withdrawals are back. Tonight I keep picturing that signer in the minute after 18:31, alerts going off somewhere down the hall, doing its job perfectly. Nothing inside it was broken. It just never asked who was asking.